schema.prisma

// This is your Prisma schema file,
// learn more about it in the docs: https://pris.ly/d/prisma-schema

generator client {
  provider = "prisma-client-js"
}

datasource db {
  provider = "postgresql"
  url      = env("DATABASE_URL")
}

model Claim {
  id                Int       @id // claimId from contract
  policyId          String    // holderAddress:policyId
  creatorAddress    String
  amount            String
  asset             String?
  description       String?
  imageUrls         String[]  @default([])
  status            ClaimStatus @default(PENDING)
  isFinalized       Boolean   @default(false)
  approveVotes      Int       @default(0)
  rejectVotes       Int       @default(0)
  paidAt            DateTime?
  createdAtLedger   Int
  updatedAtLedger   Int       @default(0)
  txHash            String?
  eventIndex        Int?
  createdAt         DateTime  @default(now())
  updatedAt         DateTime  @updatedAt

  // Relations
  policy            Policy    @relation(fields: [policyId], references: [id])
  votes             Vote[]

  @@index([status])
  @@index([createdAt])
  @@index([policyId])
  @@index([createdAt, id]) // keyset pagination: ORDER BY createdAt DESC, id DESC
  @@map("claims")
}

model Vote {
  id            Int       @id @default(autoincrement())
  claimId       Int
  voterAddress  String
  vote          VoteType
  votingPower   Int       @default(1)
  txHash        String?
  eventIndex    Int?
  votedAtLedger Int
  createdAt     DateTime  @default(now())

  // Relations
  claim         Claim     @relation(fields: [claimId], references: [id], onDelete: Cascade)

  @@unique([claimId, voterAddress])
  @@index([voterAddress])
  @@index([claimId])
  @@map("votes")
}

model Policy {
  id                    String   @id // holderAddress:policyId
  policyId              Int
  holderAddress         String
  policyType            String
  region                String
  coverageAmount        String
  premium               String
  isActive              Boolean  @default(true)
  startLedger           Int
  endLedger             Int
  /// SEP-41 asset contract ID bound to this policy for premium and payout.
  /// Null for legacy policies created before multi-asset support.
  assetContractId       String?
  txHash                String?
  eventIndex            Int?
  createdAt             DateTime @default(now())
  updatedAt             DateTime @updatedAt

  // Relations
  claims                Claim[]

  @@unique([holderAddress, policyId])
  @@index([holderAddress])
  @@index([isActive])
  @@index([createdAt, id]) // keyset pagination: ORDER BY createdAt DESC, id DESC
  @@map("policies")
}

model IndexerState {
  id              Int      @id @default(autoincrement())
  lastLedger      Int
  lastCursor      String?
  updatedAt       DateTime @updatedAt

  @@map("indexer_state")
}

model RawEvent {
  id              Int      @id @default(autoincrement())
  txHash          String
  eventIndex      Int
  contractId      String
  ledger          Int
  ledgerClosedAt  DateTime
  topic1          String?
  topic2          String?
  topic3          String?
  topic4          String?
  data            Json
  createdAt       DateTime @default(now())

  @@unique([txHash, eventIndex])
  @@index([contractId])
  @@index([ledger])
  @@map("raw_events")
}

enum ClaimStatus {
  PENDING
  APPROVED
  PAID
  REJECTED
}

enum VoteType {
  APPROVE
  REJECT
}

/// Immutable operational audit trail written by admin endpoints.
/// Rows must never be updated or deleted — append-only.
model AdminAuditLog {
  id          String   @id @default(uuid())
  actor       String   /// wallet address or staff email of the operator
  action      String   /// e.g. "reindex", "pause", "feature_flag_update"
  payload     Json     /// full request payload for forensic replay
  ipAddress   String?
  createdAt   DateTime @default(now())

  @@index([actor])
  @@index([action])
  @@index([createdAt])
  @@map("admin_audit_logs")
}

/// Runtime feature flags toggled by admin operators.
model FeatureFlag {
  key         String   @id
  enabled     Boolean  @default(false)
  description String?
  updatedBy   String
  updatedAt   DateTime @updatedAt

  @@map("feature_flags")
}

/// Deduplication table for wasm drift alerts — one row per (contract, actual-hash) pair.
/// Prevents repeated webhook spam for the same unresolved drift.
model WasmDriftAlert {
  id            String   @id @default(uuid())
  dedupKey      String   @unique /// "<contractName>:<actualHash>"
  contractName  String
  contractId    String
  expectedHash  String
  actualHash    String
  resolvedAt    DateTime?
  createdAt     DateTime @default(now())

  @@index([contractName])
  @@map("wasm_drift_alerts")
}

/// Tracks staff-initiated privacy requests (GDPR/CCPA-style) for off-chain data.
/// On-chain and IPFS data is immutable and cannot be erased — see runbook.
model PrivacyRequest {
  id                    String    @id @default(uuid())
  subjectWalletAddress  String
  requestType           String    /// "ANONYMIZE" | "DELETE"
  requestedBy           String    /// staff actor (wallet address or email)
  status                String    @default("IN_PROGRESS") /// "IN_PROGRESS" | "COMPLETED" | "FAILED"
  rowsAffected          Int       @default(0)
  notes                 String?
  errorMessage          String?
  completedAt           DateTime?
  createdAt             DateTime  @default(now())

  @@index([subjectWalletAddress])
  @@index([status])
  @@map("privacy_requests")
}

/// Off-chain metadata for allowlisted SEP-41 asset contracts.
/// Populated by the indexer when it observes AssetAdded events.
/// Used by the frontend and API to display correct symbol/decimals.
model AllowedAsset {
  /// SEP-41 contract address (Stellar strkey format).
  contractId    String   @id
  /// Token symbol, e.g. "USDC", "XLM". Populated off-chain.
  symbol        String?
  /// Decimal places, e.g. 7 for XLM/USDC on Stellar.
  decimals      Int      @default(7)
  /// Whether this asset is currently on the allowlist.
  isAllowed     Boolean  @default(true)
  /// Ledger at which the asset was added to the allowlist.
  addedAtLedger Int?
  createdAt     DateTime @default(now())
  updatedAt     DateTime @updatedAt

  @@map("allowed_assets")
}

/// Support ticket submitted via the /support contact form.
model SupportTicket {
  id        String   @id @default(uuid())
  email     String
  subject   String
  message   String
  /// One-way hash of submitter IP for spam detection (no raw IP stored).
  ipHash    String?
  status    TicketStatus @default(OPEN)
  createdAt DateTime @default(now())
  updatedAt DateTime @updatedAt

  @@index([status])
  @@index([createdAt])
  @@map("support_tickets")
}

/// Privacy-safe FAQ expansion counters.
model FaqStat {
  faqId      String   @id
  expansions Int      @default(0)
  updatedAt  DateTime @updatedAt

  @@map("faq_stats")
}

enum TicketStatus {
  OPEN
  IN_PROGRESS
  RESOLVED
  CLOSED
}